Privacy Assurance & Compliance Specialist
Core
Manage and support the day-to-day delivery of a global privacy assurance and compliance programme, ensuring privacy risks and regulatory obligations are identified, managed, and monitored.
Role type
Privacy Assurance & Compliance Specialist
Builds
Scalable and audit-ready privacy programme across evolving frameworks
Domain
Technology / Data Privacy / Compliance
Required skills
Data privacy compliance, Risk management, Regulatory compliance (GDPR), Data mapping, Controls testing, Policy development, Data Subject Access Requests (DSARs), Data Deletion Requests, Data Protection Impact Assessments (DPIAs), Vendor security reviews, Incident response, GRC tools management, Audit support, Cross-functional stakeholder management
Preferred skills
SaaS/Edtech environment experience, ISO 27001/27701/42001 knowledge, GRC platforms (Vanta, One Trust), Privacy certifications (CIPP/E, CIPM)
Technologies
GRC platforms, Google Workspace
Responsibilities
Implement and deliver the privacy workstream of the compliance roadmap; Lead and coordinate Data Protection Impact Assessments (DPIAs); Manage the framework for Data Subject Access Requests (DSARs) and Data Deletion Requests; Identify privacy risks and translate them into practical business processes; Conduct internal Vendor Security Reviews; Develop and maintain internal privacy policies and external privacy notices; Lead privacy assurance activities supporting audit and certification initiatives; Monitor regulatory developments and liaise with external and internal legal counsel.
Seniority
Mid-level, hands-on IC